Gymochi Privacy Policy
Last updated: 4 November 2026
Gymochi ("Gymochi", "we", "us") is a workout app for iPhone, operated by Chew Yeu Jet, an individual based in Malaysia. This policy covers the app and our website, gymochi.com. It explains what we collect, why, who we share it with, and the choices you have. If you have a question, email us at support@gymochi.com.
The short version
- Your training plan and workouts are saved on your phone first. If you create an account, they are also stored on our server so you can restore them.
- We never sell your data, and we don't use it for advertising or tracking across other apps.
- Your answers to the health check stay on your phone and are never sent to us.
- You can delete your account and all its data from inside the app at any time.
1. What we collect
Information you give us
- Account details: your email address (or the anonymous email that Sign in with Apple gives us), your first name, and how you signed in (Apple, Google or an email code). If you sign in with Google, Google shares your name and email address with us.
- Messages you send us: ideas, feedback and votes you send from Ideas & Feedback, and your email address so we can reply.
- 66-Day Habit Promise (yearly plans only): your answers to the 4 habit check questions in your first week and again at day 66, your application, anything you choose to write in it, and the workouts from your first 66 days with the time each one first reached our server, so we can check the promise rules and send you a code.
- Profile and plan: your goal, experience, training days, equipment, age, height, body weight and its history, units, movements to avoid, exercises you've hidden, when you tapped "This hurts" on an exercise and what kind of pain you picked (so the app can stop giving you that exercise on your other devices), colour and language choices, and reminder settings. The "This hurts" taps are never sent to our analytics. Because the kind of pain you pick is information about your health, we keep it only to stop giving you that exercise, store it with the rest of your account, and delete it with your account.
- Workouts: the exercises, sets, reps, weights, times and ratings you log, plus notes such as machine settings, and the time each workout was first synced to our server.
Information that stays on your phone
- Health check answers: whether a doctor has told you about heart disease, diabetes, kidney disease or a stroke; chest pain, fainting or breathlessness; a doctor's advice to exercise only with supervision; and pregnancy or a recent birth. These are health data. They are used only on your phone to set how your plan starts. They are never sent to us, are not backed up to your account (so you'll be asked again on a new phone), and are deleted with the app.
- The workout in progress, until you finish it.
- "On my period" (an optional choice in "How's today?"): if you pick it, the workout is saved and counted as a low-energy day, and that's all we keep. Whether you chose "On my period" is never saved, sent to us or used for analytics, and Gymochi never tracks or predicts your cycle. The setting that shows or hides this choice also stays on your phone.
- Your own words in the setup question "Something else? In your own words". We never receive them.
Information collected automatically
- App usage: a short list of actions, such as finishing setup, viewing the paywall, starting checkout and whether a purchase went through, signing in (and with Apple, Google or email), opening the app and each tab (once a day), allowing reminders or opening the app from one, answering "How's today?", starting, finishing or discarding a workout, swapping an exercise, accepting or keeping a plan change, using the Ideas board, and the 66-Day Habit Promise's progress and habit check scores. With some of these we record simple details, like the energy, time and place you picked, how many sets you planned and logged, and how you rated the session. This is linked to a random account ID, never to your name or email, and it never includes your body numbers, health answers or anything you type.
- Onboarding screen recordings: while you go through the first-time setup, we may record how you move through the screens, with all text hidden, to find confusing steps. Screens with body or health answers, including the health check page, are not recorded.
- Purchases: your subscription plan, status, renewal date and the App Store country, received from Apple through our payments provider. We never see your card or payment details.
- Technical data: device model, iOS version and app version, and how fast the app opens and exercise videos start.
We do not collect your location (not even a rough one from your internet address), contacts, photos or Apple Health data.
On our website (gymochi.com)
- Waitlist: if you join the waitlist, we keep your email address with Brevo so we can tell you when Gymochi launches. We delete it on request, and within 12 months of launch at the latest. Which button you used and the link that brought you (for example a TikTok post) go to our website analytics with the sign-up, without your email address.
- Optional question: after joining you can tell us what gets in the way of training, and add a note in your own words. Your answer goes to our analytics with a random ID that links it to your sign-up, not with your email address. You can skip it.
- Website analytics: which pages and sections are viewed, button clicks, the site or link you came from, and your rough location and device type, through PostHog. We don't use cookies, record your screen or use this for advertising, and your email address is never sent to our analytics. While the page is open, your browser tab keeps the link you came from and, after you join, the random ID, so the thank-you page can connect your answer; both are cleared when you close the tab.
- Hosting: Netlify hosts the website and processes your IP address and browser details to deliver the pages.
2. Why we use it
- To build and adapt your training plan and keep your history (performing our contract with you).
- To sync and restore your data when you sign in on a phone (performing our contract).
- To manage your subscription and give you the features you paid for (performing our contract).
- To understand which parts of the app work and fix problems (our legitimate interest in improving Gymochi; in the EU, EEA and UK, only with your consent).
- To measure, across everyone together, whether Gymochi helps people keep training: for example, how many people are still training after 12 weeks, how often people adjust a workout, and how strength changes over time. For this we use the workouts saved to your account and the app usage above. We look only at totals and percentages for groups of people, never at one person's training, and we leave out profile details such as your name, age, body weight, limits and anything you've written. We only publish a number when it comes from at least 100 people, and we never show a group smaller than 20, so no one can be picked out. If you turn off "Share usage data", your data is left out of these statistics from then on. (Our legitimate interest in improving Gymochi and making honest claims about it; in the EU, EEA and UK, only with your consent.)
- To send workout reminders, if you turn them on (your consent).
- To email you when Gymochi launches, if you joined the waitlist (your consent).
- To answer your messages and meet legal obligations.
Your plan is made by rules that run on your phone from your answers and workouts. No one at Gymochi reviews it, and we don't use your data to make decisions about you that have legal or similarly significant effects.
3. Outcome statistics
From time to time we may share statistics about Gymochi users as a group, for example "of people who started in November, 62% were still training 12 weeks later" (an example, not a real result). These numbers are worked out from many people's data and say nothing about any one person. If you later turn off sharing or delete your account, numbers we've already published stay as they are, but your data won't be used in any new ones.
4. Who we share it with
We use a small number of service providers who process data only on our instructions:
| Provider | What for | Where |
|---|---|---|
| Supabase | Account sign-in and storing your plan and workouts | Singapore |
| RevenueCat | Managing subscriptions and purchase status | United States |
| PostHog | App and website usage analytics | United States |
| Apple | App Store, payments, Sign in with Apple, notifications | Worldwide |
| Sign in with Google | Worldwide | |
| Brevo | Sending sign-in codes by email, and storing waitlist sign-ups and sending the launch email | European Union |
| Netlify | Hosting gymochi.com | United States |
| YouTube (Google) | Playing exercise videos inside the app | Worldwide |
When you watch an exercise video, YouTube receives information about that viewing under Google's own privacy policy.
We may also disclose information if the law requires it, or to protect the safety of our users. If Gymochi is ever sold or merged, your information may transfer to the new owner under this same policy, and we will tell you first.
5. International transfers
Some of our providers store data outside Malaysia, including in Singapore and the United States. We choose providers that protect data with appropriate safeguards, such as standard contractual clauses where required.
6. How long we keep it
- Account data: until you delete your account. Deletion removes your profile, plan, workouts and subscription record from our server, and asks our payments and analytics providers to delete theirs.
- Usage analytics: up to 2 years, then deleted or made anonymous.
- Group statistics: the totals and percentages we work out contain no personal data and may be kept indefinitely.
- Backups: deleted data may remain in encrypted backups for up to 30 days.
- Purchase records: Apple keeps its own records of your purchases under its policies, and we may keep basic transaction records where tax law requires.
- Ideas, feedback and messages: until you delete your account, or for up to 2 years after we last reply to you, whichever comes first. Ideas you posted on the board are deleted with your account.
- 66-Day Habit Promise applications: for as long as needed to check the application and send the code, then for up to 2 years in case of a question about it, then deleted.
7. Your choices and rights
- Delete your account: Profile → Account → Delete my account. This cannot be undone. If you have an App Store subscription, cancel it in iPhone Settings → your name → Subscriptions, because deleting your account does not cancel it.
- Without an account: Profile → Account → Delete my data clears everything on your phone.
- Analytics and outcome statistics: turn "Share usage data" off in Profile → Preferences at any time. This stops app usage analytics and leaves your workouts out of future outcome statistics. In the EU, EEA and UK both stay off until you agree.
- Reminders: turn them off in the app or in iPhone Settings.
- Access, correction and more: depending on where you live (including under Malaysia's Personal Data Protection Act 2010 and, in the EU, EEA and UK, the GDPR), you may have the right to access, correct, export or delete your data, object to or restrict its use, and withdraw consent. Email support@gymochi.com and we will reply within 30 days. You can also complain to your local data protection authority. In Malaysia, that is the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi).
- United States: we don't sell your personal information or share it for targeted advertising. Depending on your state (for example California), you may have the right to know what we hold about you, to correct or delete it, and to not be treated differently for using these rights. Email us to use them.
8. Children
Gymochi is for people aged 16 and over. We do not knowingly collect data from anyone younger. If you believe a child under 16 has used Gymochi, email us and we will delete their data.
9. Security
Data is encrypted in transit, access to your account data is limited to you through row-level security, and secret keys are kept only on our server. Only the people who run Gymochi can reach our admin tools, and those accounts use two-step sign-in. No system is perfectly secure, so please keep your Apple ID and email account safe. If a data breach ever puts your personal data at risk, we will tell you and the relevant authorities as the law requires.
10. Health note
Gymochi gives general fitness guidance, not medical advice. The information you enter about your body and training is used only to build your plan.
11. Changes
If we change this policy in a meaningful way, we will tell you in the app before the change takes effect. The date at the top shows the latest version.
12. Contact
Chew Yeu Jet, Gymochi Email: support@gymochi.com Malaysia